CVE-2012-2984 in Content Gateway

Summary

Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) item parameter.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 05/30/2012
• Disclosure: 08/24/2012
• Moderation: VulDB entry created
• Entries: VDB-6015 (1)
• CPE: ready
• CWE: CWE-79 (Confirmed)
• Exploit: Download
• CVSS: 4.6
• EPSS: 0.01784
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-2984
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-2984
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-2984/